Cybersecurity Leadership: From Practitioner to CISO
The average CISO lasts less than three years. This book is about the disciplines of the ones who endure.
If you have moved from practitioner to leader, or expect to soon, you already know the gap. Technical excellence is necessary but no longer enough. The work is now about influence without authority, board reporting that lands, risk decisions made under pressure, crisis communication that ages well, and the personal discipline to do this for years rather than months.
Cybersecurity Leadership: From Practitioner to CISO is a field manual for the senior security leader. Across forty-seven chapters in seven parts, Dr. Shibu Valsalan addresses the questions that matter most:
▸ How do you spend your first 90 days as a new security leader? ▸ What does a board actually need to hear from you? ▸ When should you pay a ransom, and when should you refuse? ▸ How do you build credibility with engineering, the business, and the board? ▸ How do you survive a major incident without breaking your team? ▸ How do you build a programme that outlasts you? ▸ What comes after the CISO role?
Each chapter opens with a scenario from real practice, develops the analytical content with sector-specific examples, flags the warning signs of trouble before they arrive, and ends with five questions designed to prompt honest reflection on your own situation.
What you'll find inside:
▸ The practitioner-to-leader transition and what most people get wrong
▸ Operating models, organisational design, and the economics of security
▸ Quantitative risk in practice, beyond the heatmap
▸ Reporting to the board, working with the audit committee, and engaging regulators
▸ Programme areas at scale: identity, cloud, AppSec, data, OT, third-party risk, AI security
▸ Hiring, retention, burnout, and the people side of leadership
▸ Incident command, ransomware, crisis communication, and the day after
▸ Geopolitics, AI, quantum migration, and the regulatory wave
▸ Five working appendices: board reports, programme charter, incident command templates, first-90-days worksheet, recommended reading
Whether you are stepping into your first senior security role, leading an established programme through change, or advising others who are, this is the book you can reach for at the moment you actually need it.
Read it sequentially as a development guide. Reach for the relevant chapter mid-crisis. Either way, this is a book to keep on the desk, not on the shelf.
About the Author
Dr. Shibu Valsalan, Ph.D, M.Sc, MBA, has spent his career in cybersecurity, in both operational and advisory roles. His work has spanned multiple sectors and several countries. He is also the author of Cybersecurity A to Z: All You Wanted to Know, the companion volume written for those entering the field rather than those leading it.
Customer Reviews
ThriftBooks ® and the ThriftBooks ® logo are registered trademarks of Thrift Books Global, LLC
